From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from lists.gentoo.org (pigeon.gentoo.org [208.92.234.80]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by finch.gentoo.org (Postfix) with ESMTPS id B25AE138334 for ; Sat, 23 Feb 2019 07:46:14 +0000 (UTC) Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 3B5BAE08C4; Sat, 23 Feb 2019 07:46:12 +0000 (UTC) Received: from smtp.gentoo.org (smtp.gentoo.org [140.211.166.183]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by pigeon.gentoo.org (Postfix) with ESMTPS id 0442EE08BF for ; Sat, 23 Feb 2019 07:46:11 +0000 (UTC) Received: from pomiot (d202-252.icpnet.pl [109.173.202.252]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: mgorny) by smtp.gentoo.org (Postfix) with ESMTPSA id E0352335DD0; Sat, 23 Feb 2019 07:46:09 +0000 (UTC) Message-ID: <1550907966.752.2.camel@gentoo.org> Subject: Re: [gentoo-project] [RFC] OpenPGP Authority Keys to provide validity of developer/service keys From: =?UTF-8?Q?Micha=C5=82_G=C3=B3rny?= To: gentoo-project@lists.gentoo.org Date: Sat, 23 Feb 2019 08:46:06 +0100 In-Reply-To: References: <1550306421.831.16.camel@gentoo.org> <1550393754.1257.5.camel@gentoo.org> <20190217185416.nbgwm266moyk6j2u@gentoo.org> <1550496176.727.9.camel@gentoo.org> <1550606478.912.10.camel@gentoo.org> Organization: Gentoo Content-Type: multipart/signed; micalg="pgp-sha512"; protocol="application/pgp-signature"; boundary="=-Di0DbbR+wA4o5Qbt2TlX" X-Mailer: Evolution 3.26.6 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Project discussion list X-BeenThere: gentoo-project@lists.gentoo.org Reply-To: gentoo-project@lists.gentoo.org X-Auto-Response-Suppress: DR, RN, NRN, OOF, AutoReply Mime-Version: 1.0 X-Archives-Salt: 7696ec90-6e27-4d48-9a58-dd83fe38b0f3 X-Archives-Hash: a1c77579c0804ef77f45d2a67239b565 --=-Di0DbbR+wA4o5Qbt2TlX Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Tue, 2019-02-19 at 15:16 -0500, Rich Freeman wrote: > Also, as far as I'm aware GLEP 63 does not require an encryption key > at all, just a signing key. I'm not sure if such signing-keys will be > signed by Gentoo under this proposal. If not then there is nothing to > upload to the keyserver, and in any case it seems like the main use > case of this (sending encrypted email) would not apply. Of course it > could still be used for verifying email signatures if we sign > signing-only keys. If someone really believes it's fine to have no encryption subkey just because the GLEP doesn't require one explicitly... It either means that person is seriously lacking the technical competence, or is a horrible troll. In either case, I don't believe such a person should be a Gentoo developer. --=20 Best regards, Micha=C5=82 G=C3=B3rny --=-Di0DbbR+wA4o5Qbt2TlX Content-Type: application/pgp-signature; name="signature.asc" Content-Description: This is a digitally signed message part Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNATURE----- iQKTBAABCgB9FiEEXr8g+Zb7PCLMb8pAur8dX/jIEQoFAlxw+j5fFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDVF QkYyMEY5OTZGQjNDMjJDQzZGQ0E0MEJBQkYxRDVGRjhDODExMEEACgkQur8dX/jI EQo0ghAA7XccUBlBZbNuXmXfGSuLv0PtaXojyQYR6XPo0wndi8xHmMZrejlB61Bl uJEuyorIohKwJLLBSceC+s/dbFC7dD6Ir3oDyQisxmpAxKCtNLP2uhdz/G4M++rc /HirYv7SCYWCX6lGrpfCloy40tXQkNhAd553MlXf4iggpL3HHHmcPMqWF4ggktBC i0OV/oLTkAxaGXkI8EVRMne0IC3D0dNZkNHGxiUNPvEJgXEQCufKFl8OWGDMWQZm pq/pIt6JcZu9EEvY89n+YGXCdQNzmRTG+uIdM+ouLuMFoSMNydNmPQMJ7VeFDKjZ 1u5GfeZ6UlntrSlq7jpSN64VuoBG/GLdMjYubZBM8rG4u0UeDitrtt30FNOK+cZZ 7pbMuz2X2GfZQf3C2oOdAvSewUc8AMFvX25Q/eysgjw7UgMOIDEDk6qrD3ARdE6i 5q18rCNdzmGL/VR3KwJt7VV/r2+/9uRgmGnWm8fJhbHXcxzVU3BTdgox20s9dQKa xpurp7kHUKA4iKpr/pMHsSgXXRORLZpq18nqskwh/o9nvL5/pjoNi2kg7dENEBHt FDvAi/PcBEoW43p3Agt8TK7vVy44vAXnm1/uO8zDXcGT47ORmoOv/oKZxEXFXxMp TsjuCW5QrMFWXq1Whrnz/a2miDQ3JXdVY7rpFyCQY/LLMzlJRSw= =5uY5 -----END PGP SIGNATURE----- --=-Di0DbbR+wA4o5Qbt2TlX--